Security
Security, privacy, and continuity
We design Hustle Mentor with UK data protection in mind. Encryption everywhere, regional redundancy, and a clear incident process you can rely on.
UK/EU hosting
•
Encryption in transit & at rest
•
Regular backups
Data protection
- Encryption at rest (AES-256) and in transit (TLS 1.2+)
- Backups every 12 hours with 30-day retention and restore tests
- Principle of least privilege with role-based access
- Data residency in UK/EU regions
Operational security
- Mandatory two-factor authentication for our team
- SSO and enforced 2FA available for customers
- Audit logs for sensitive actions and exports
- Annual penetration testing and regular dependency reviews
Privacy & compliance
- Built with UK GDPR obligations and ICO guidance in mind
- Data Processing Agreement (DPA) available on request
- Sub-processor transparency with UK/EU locations
- Right to access, export, and delete on demand
Incident response
- 24/7 monitoring with defined severity levels
- Initial triage within 60 minutes for critical issues
- Customer notifications within legally required timeframes
- Status updates on our status page
Responsible disclosure
If you believe you’ve found a vulnerability, email security@hustlementor.com. Please include reproduction steps so we can investigate quickly.
We review reports promptly and will keep you updated on progress. Thank you for helping us keep customers safe.
Business continuity
We operate active-active infrastructure across UK/EU regions with automated failover. Our recovery time objective is under 1 hour for critical services.